Privacy policy

1. Controller

RE:SORB, Rudolf-Reusch-Str. 23B, 10367 Berlin, Germany — Stefan Ihmig. Email: info@resorb.tv.

2. Hosting and server log files

This website is hosted on Cloudflare Pages and delivered through Cloudflare’s content delivery network. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA; its German subsidiary is Cloudflare Germany GmbH, c/o Design Offices München Atlas, Rosenheimer Straße 143C, 81671 Munich, Germany.

Every request is answered by whichever Cloudflare location is closest to you in network terms — for visitors in Europe normally a European one. In doing so Cloudflare processes technical connection data: your IP address, the date and time of the request, the page requested, the volume of data transferred, the referrer and the identifier of your browser and operating system. This is technically necessary in order to deliver the page, and it protects the service against attack and overload. The legal basis is our legitimate interest in operating this website securely and reliably (Art. 6 (1) f GDPR). We ourselves receive no log files from Cloudflare; how long Cloudflare stores them is governed by its privacy policy.

Cloudflare acts as our processor. Cloudflare’s Data Processing Addendum (Art. 28 GDPR) is incorporated into the terms of use we accepted: cloudflare.com/cloudflare-customer-dpa. Because Cloudflare runs a worldwide network, data may also be processed outside the European Union, in particular in the USA. For such transfers Cloudflare relies on its certification under the EU–U.S. Data Privacy Framework and, where that does not apply, on the EU standard contractual clauses agreed in that addendum (Implementing Decision (EU) 2021/914). Cloudflare’s privacy policy: cloudflare.com/privacypolicy.

Our domain resorb.tv (DNS) and our e-mail accounts remain with STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. E-mail you send us therefore arrives on servers in Germany.

3. Reach measurement (Umami)

We use Umami, a privacy-friendly web analytics service of Umami Software, Inc., a company registered in Delaware, United States, to measure how our pages are found and used. Our account is set to the EU data region.

Umami works without cookies. It does not store any information on your device and does not create a device fingerprint. Each request is assigned to a visit by means of a hash value that the service calculates from your IP address, your browser identifier (user agent) and our website ID, using a salt that changes every hour (for visits) and every month (for visitors). Your IP address is used only to derive this hash and to determine an approximate location (country, region, city) and is not stored.

The following are processed: page URL including query parameters, page title, referrer, campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and advertising click IDs (e.g. gclid), browser, operating system, device type, screen size, browser language, approximate location, timestamp, and the events “contact-email” and “contact-phone” that we record when a visitor clicks an e-mail or telephone link (including the chat’s “Send to our team” button), and, if you use the chat, the events “chat-open” and “chat-message” (language and the number of the message in the conversation, never its content).

The legal basis is our legitimate interest in a statistically sound evaluation of our reach and of our advertising (Art. 6 (1) f GDPR). Because no information is stored on or read from your device for this purpose, no consent under § 25 TDDDG is required. Data is deleted after six months.

A data processing agreement under Art. 28 GDPR is in place with Umami Software, Inc., 28 Geary St, Suite 650 #243, San Francisco, California, United States; it forms part of Umami’s terms of service (umami.is/dpa). Data may be transferred to the USA; the transfer is based on the EU Standard Contractual Clauses (Implementing Decision (EU) 2021/914), which the agreement incorporates.

Umami’s subprocessors are listed at umami.is/subprocessors; its privacy policy at umami.is/privacy.

Apart from this we use no advertising or social media plug-ins. Fonts are hosted on our own server; no requests are sent to Google or other font providers.

4. Embedded videos (Vimeo) — two-click solution

Our project films are hosted by Vimeo.com, Inc., 330 West 34th Street, New York, NY 10001, USA. Videos are not loaded automatically: you only see a preview image from our server. Only when you click “Play film” is the Vimeo player loaded and a connection to Vimeo established, which transmits your IP address to Vimeo. We use the player’s do-not-track mode (“dnt=1”), in which Vimeo states that it does not set tracking cookies or collect usage data. By clicking play you consent to this data transfer (Art. 6 (1) a GDPR); you can withdraw consent at any time by not clicking further videos. Vimeo’s privacy policy: vimeo.com/privacy.

5. Contact by email or phone

If you contact us, we store your message and contact details to handle your request and possible follow-up questions (Art. 6 (1) b GDPR). Data is deleted once the request is completed and no statutory retention periods apply.

AI assistant (“Ask RE:SORB”)

The chat on this website is optional. Its answers are generated automatically by an AI language model (Claude by Anthropic), not by a person. Nothing is sent to Anthropic until you send a message. If you use the chat, your messages and the assistant’s previous answers in the same conversation are sent through our host Cloudflare (a server function, see section 2) to Anthropic, which generates the answer. Our server function does not pass your IP address on to Anthropic. Please do not enter sensitive personal data (for example health data) or personal data of other people.

In your browser the conversation exists only in the open window, and the chat stores nothing on your device (no cookie, no local storage). To protect the chat against misuse (spam, automated requests, attempts to run up costs) and to check the quality of its answers, our server function stores each message together with the assistant’s answer, your IP address, the country and network operator derived from it, your browser’s identification (user agent), the time and the cost of the answer with our host Cloudflare (see section 2) for 30 days; after that the entries are deleted automatically. It also counts the messages per connection and blocks a connection for 24 hours if it sends very many messages or repeatedly tries to misuse the chat; we receive an e-mail about each such block with the IP address, the country and the last message. Messages from the Tor network and from data-centre networks are not accepted. Anthropic, as our processor, automatically deletes inputs and outputs within 30 days; if its automated trust-and-safety systems flag a conversation as a possible breach of its usage policy, Anthropic may keep it for up to two years and the classification scores for up to seven years. Before each message, Cloudflare Turnstile (Cloudflare, Inc., USA) checks that the chat is used by a person and not by a bot. For this, a script from challenges.cloudflare.com runs in your browser; it reads technical characteristics of your browser and device and may use your browser’s storage. Cloudflare receives your IP address and browser information, and our server function sends Cloudflare your IP address together with the check token for verification. This access is strictly necessary to provide the chat you asked to use (§ 25 (2) no. 2 TDDDG); the legal basis for the processing is Art. 6 (1) (f) GDPR (protecting the chat against automated misuse).

If you press “Send to our team”, your own e-mail program opens with the conversation; nothing is sent until you send that e-mail yourself. Prices given in the chat are non-binding net guide prices; our team confirms the final price personally. No automated decision within the meaning of Art. 22 GDPR is taken.

Legal basis: Art. 6 (1) (b) GDPR (answering your enquiry before a possible contract) and Art. 6 (1) (f) GDPR (our legitimate interest in answering enquiries quickly, in protecting the chat against misuse and in checking its answers). Anthropic, PBC (USA), processes the data on our behalf. Its Data Processing Addendum (Art. 28 GDPR) is incorporated into the commercial terms we accepted, and under those terms Anthropic may not train its models on the content. Anthropic stores the data in the USA and may compute the answer in other countries outside the EU; it uses subprocessors (anthropic.com/subprocessors), and these transfers rely on the EU Standard Contractual Clauses (Implementing Decision (EU) 2021/914) contained in that addendum. Details: anthropic.com/legal/commercial-terms and anthropic.com/legal/data-processing-addendum.

6. External links

This site links to Instagram and Vimeo. These platforms process data under their own responsibility; please refer to their privacy policies.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority — for Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit. Contact us at info@resorb.tv to exercise your rights.

Last updated: 2026-10-21.